Intel® SGX Platform Software and Intel® SGX SDK Advisory

guest · Jan 14, 2019

Intel® SGX Platform Software and Intel® SGX SDK Advisory
INTEL-SA-00203
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00203.html

Advisory Category: Software
Impact of vulnerability: Escalation of Privilege, Information Disclosure
Severity rating: HIGH
Original release: 01/08/2019
Last revised: 01/08/2019
Click to expand...

Summary:
Multiple potential security vulnerabilities in Intel® SGX SDK and Intel® SGX Platform Software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities.
Click to expand...

Vulnerability Details:
CVEID: CVE-2018-18098
Description: Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.
CVSS Base Score: 7.5 High

CVEID: CVE-2018-12155
Description: Data leakage in cryptographic libraries for Intel(R) IPP before 2019 update 1 release may allow an unprivileged user to cause information disclosure via local access.
CVSS Base Score: 4.7 Medium
Click to expand...

Log in or Sign up

Intel® SGX Platform Software and Intel® SGX SDK Advisory

guest Guest

Log in or Sign up

Intel® SGX Platform Software and Intel® SGX SDK Advisory

guest Guest

Useful Searches